quay/data/users at redhat-3.8 - quay

mirror of https://github.com/quay/quay.git synced 2026-01-29 08:42:15 +03:00

Files

OpenShift Cherrypick Robot 3b38e85935 [redhat-3.8] security: Change error messages in UI during LDAP login (PROJQUAY-4845) (#1801 )

* Change error messages in UI during LDAP login (PROJQUAY-4845)

Previously, on installations where LDAP is used, we were telling users whether the username or password was failing when login attempts were made. This might pose a security risk, a malicious user could, via the returned message, identify which users have access to Quay and which don't.
With this change, we return a general message saying the user used wrong credentials instead of providing any details.

* Fixed tests.

* Fix some more tests.

* Readd accidental removal of one assertion.

---------

Co-authored-by: Ivan Bazulic <ibazulic@redhat.com>

2023-03-21 13:58:43 +01:00

test

users: superuser group in federated identity provider (PROJQUAY-3924) (#1464 )

2022-08-11 15:36:10 -04:00

__init__.py

users: fix behavior when using ldap and restricted user whitelist is set (PROJQUAY-4767) (#1641 )

2022-11-23 15:25:32 -05:00

apptoken.py

users: add restricted users' filter (PROJQUAY-1245) (#1599 )

2022-10-28 15:00:22 -04:00

database.py

users: add restricted users' filter (PROJQUAY-1245) (#1599 )